Free ACE Exam Braindumps
Accredited Configuration Engineer (ACE) Questions 76–80 (page: 17)

Updated On: 10-Feb-2026

When configuring a Decryption Policy rule, which option allows a firewall administrator to control SSHv2 tunneling in policies by specifying the SSHtunnel AppID?

  1. SSH Proxy
  2. SSL Forward Proxy
  3. SSL Inbound Inspection
  4. SSL Reverse Proxy

Answer(s): A



The "Drive-By Download" protection feature, under File Blocking profiles in Content-ID, provides:

  1. Increased speed on downloads of file types that are explicitly enabled.
  2. The ability to use Authentication Profiles, in order to protect against unwanted downloads.
  3. Password-protected access to specific file downloads for authorized users.
  4. Protection against unwanted downloads by showing the user a response page indicating that a file is going to be downloaded.

Answer(s): D




Taking into account only the information in the screenshot above, answer the following question. In order for ping traffic to traverse this device from e1/2 to e1/1, what else needs to be configured? Select all that apply.

  1. Security policy from trust zone to Internet zone that allows ping
  2. Create the appropriate routes in the default virtual router
  3. Security policy from Internet zone to trust zone that allows ping
  4. Create a Management profile that allows ping. Assign that management profile to e1/1 and e1/2

Answer(s): A,D



The following can be configured as a next hop in a Static Route:

  1. A Policy-Based Forwarding Rule
  2. Virtual System
  3. A Dynamic Routing Protocol
  4. Virtual Router

Answer(s): D



What are two sources of information for determining if the firewall has been successful in communicating with an external User-ID Agent?

  1. System Logs and the indicator light under the User-ID Agent settings in the firewall
  2. There's only one location - System Logs
  3. There's only one location - Traffic Logs
  4. System Logs and indicator light on the chassis

Answer(s): A



Viewing page 17 of 46
Viewing questions 81 - 85 out of 222 questions


Post your Comments and Discuss Palo Alto Networks ACE exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!